Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft
File:                     Xx0w6XO1wcioD2BH3FKXeJQETD8.mft (raw, json)
Hash identifier:          J7liFDIV3k0WZSyGx+BblnXWYpaDHCEQGhZklda0+fQ=
Subject key identifier:   03:4E:08:7B:24:D5:2B:16:A0:D6:B7:D0:A3:D7:5A:60:9F:D4:6E:26
Authority key identifier: 5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F
Certificate issuer:       /CN=A9122E09/serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F
Certificate serial:       0823
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft
Manifest number:          0817
Signing time:             Sat 28 Feb 2026 21:26:10 +0000
Manifest this update:     Sat 28 Feb 2026 21:26:10 +0000
Manifest next update:     Sat 07 Mar 2026 21:26:10 +0000
Files and hashes:         1: Xx0w6XO1wcioD2BH3FKXeJQETD8.crl (hash: XfRAEQci+a2POAOerI4uY0jpiMABEmyPTD2/8/M5fSA=)
                          2: 0226D57A0CCB11EF8AE6276FC4F9AE02.roa (hash: RDAuo0ukbkiW2gxiKwesJ3g1zTBr8ESAl1lXLcl6ncU=)
                          3: BE35EDD80CCA11EF9AEDB96EC4F9AE02.roa (hash: Z1uRbBBo1ykDesKGyzNhoAS+Q0kH4ecEfYyBIro/My0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl
                          rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Mar 2026 21:26:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2083 (0x823)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122E09, serialNumber=5F1D30E973B5C1C8A80F6047DC52977894044C3F
        Validity
            Not Before: Feb 28 21:26:10 2026 GMT
            Not After : Mar  7 21:26:10 2026 GMT
        Subject: CN=69a35d72-b2b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9d:28:5b:a8:1f:78:81:f0:45:6b:09:a2:94:
                    20:f5:0d:e9:e8:7e:43:53:65:75:8e:24:98:f7:a3:
                    d8:25:81:b6:f3:a2:c0:7f:11:76:b8:a6:31:ad:9f:
                    9e:49:04:50:55:9f:f2:35:d0:b8:7d:77:2d:fc:09:
                    3f:c9:32:85:ff:eb:19:5f:c1:ae:46:49:e1:7c:64:
                    11:1a:4f:58:ac:38:7e:8e:74:35:cf:0a:68:b8:85:
                    59:0e:83:1d:aa:7e:c4:42:1c:67:a8:24:45:e1:2a:
                    06:39:76:09:bd:ef:d3:79:44:b2:92:2a:58:69:58:
                    07:ff:ff:10:a6:4e:a3:d4:90:fd:12:29:21:68:26:
                    e6:65:75:0f:6f:49:d7:01:0a:f2:f4:0e:73:c0:f6:
                    5b:d6:22:91:ef:a0:5a:14:19:2d:e8:ea:f2:b8:3e:
                    10:bf:41:0a:3c:63:97:fa:78:0d:62:71:14:15:d5:
                    2c:d6:21:f9:90:3e:3f:aa:cb:c0:7a:0a:59:9e:6c:
                    1a:20:7b:77:ba:5b:8b:69:35:70:ca:c8:97:e0:32:
                    17:1b:f3:34:cf:ae:0c:bc:7c:3c:0d:33:68:99:c3:
                    91:d2:ea:80:5b:ce:ac:65:fa:2c:4a:0d:f6:58:f5:
                    62:b9:48:7b:95:80:20:9f:a3:f0:b1:5c:2b:28:08:
                    5b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4E:08:7B:24:D5:2B:16:A0:D6:B7:D0:A3:D7:5A:60:9F:D4:6E:26
            X509v3 Authority Key Identifier:
                keyid:5F:1D:30:E9:73:B5:C1:C8:A8:0F:60:47:DC:52:97:78:94:04:4C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xx0w6XO1wcioD2BH3FKXeJQETD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122E09/01A5837A0F6411EB9FD53749C4F9AE02/Xx0w6XO1wcioD2BH3FKXeJQETD8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:be:cc:88:e6:02:05:3e:41:bc:29:2b:bc:06:d6:f8:e6:b9:
         b5:6f:1a:e6:c7:ff:36:54:7a:c6:ad:ad:dd:d7:f1:55:7b:5f:
         dc:d2:51:43:d0:1e:9a:64:ab:98:07:d3:62:21:76:3f:fd:5c:
         09:5f:34:88:9c:ae:53:3c:e7:b2:86:6b:41:96:d8:1e:ab:f0:
         2c:5a:9e:42:51:6f:84:5d:63:3b:a4:87:f3:58:fa:8e:40:17:
         31:b6:fb:25:50:26:18:44:4d:d3:1e:2d:33:b5:89:9a:ed:78:
         22:eb:cf:b1:71:a3:27:26:97:77:9f:60:eb:83:05:2b:65:b2:
         4d:f2:dd:bf:3e:c6:81:e8:67:0d:db:bb:d7:c4:9f:3d:90:99:
         2a:88:c6:81:15:57:bb:31:e7:e1:e9:73:c2:56:c7:7f:d3:20:
         0d:6b:f2:d7:38:75:f4:40:3e:b5:da:db:f0:39:bc:14:22:07:
         83:c7:8e:3a:ab:16:8d:7c:59:43:be:6f:d1:05:b6:aa:06:a7:
         4e:a6:fa:8a:8c:5f:11:74:96:a7:62:cc:18:48:16:65:40:f8:
         57:06:8f:e0:d4:0e:5a:20:62:e4:d2:c1:89:bd:5c:a4:67:0b:
         55:b5:b3:fa:91:c2:01:fd:62:bf:d8:cc:6c:6c:2e:9c:16:da:
         d0:3b:c2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:30:57 2026 by rpki-client